Preparing for a threat modeling session